Known vulnerabilities in .NET for Linux

Vendor: Microsoft
Software: .NET for Linux
Software CPE: cpe:2.3:a:microsoft:_net_for_linux:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 43
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting .NET for Linux .NET for Linux is affected by 43 known vulnerabilities: 5 high, 30 medium, 8 low Critical High Medium Low

Vulnerabilities (43)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU147965 - Exposure of sensitive information to an unauthorized actor
CVE-2026-69806		 CWE-200 Low
No
No
 9.0.317 08.09.2026 SB2026090910
#VU147478 - Origin Validation Error
CVE-2026-58649		 CWE-346 Medium
No
No
 8.0.130, 8.0.424, 9.0.120, 9.0.317 08.09.2026 SB2026090910
#VU142006 - Use After Free
CVE-2026-62898		 CWE-416 Medium
No
No
 8.0.30, 9.0.19 12.08.2026 SB20260812233
SB2026081416
SB2026081417
and 4 more
#VU141930 - Integer overflow
CVE-2026-62886		 CWE-190 High
No
No
 8.0.30, 9.0.19 12.08.2026 SB20260812233
SB2026081416
SB2026081417
and 4 more
#VU141923 - Out-of-bounds write
CVE-2026-62871		 CWE-787 High
No
No
 8.0.30, 9.0.19 12.08.2026 SB20260812233
SB2026081416
SB2026081417
and 4 more
#VU141876 - Integer overflow
CVE-2026-58641		 CWE-190 High
No
No
 8.0.30, 9.0.19 12.08.2026 SB20260812233
#VU141795 - Unchecked Return Value
CVE-2026-62909		 CWE-252 Low
No
No
 8.0.30, 9.0.19 12.08.2026 SB20260812233
SB2026081360
SB2026081364
and 11 more
#VU141793 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-62902		 CWE-829 Medium
No
No
 8.0.30, 9.0.19 12.08.2026 SB20260812233
SB2026081416
SB2026081417
and 4 more
#VU141792 - Unchecked Input for Loop Condition
CVE-2026-62901		 CWE-606 Medium
No
No
 8.0.30, 9.0.19 12.08.2026 SB20260812233
SB2026081360
SB2026081364
and 11 more
#VU141791 - Improper Removal of Sensitive Information Before Storage or Transfer
CVE-2026-62900		 CWE-212 Medium
No
No
 8.0.30, 9.0.19 12.08.2026 SB20260812233
SB2026081360
SB2026081364
and 11 more
#VU141790 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-62899		 CWE-444 Medium
No
No
 8.0.30, 9.0.19 12.08.2026 SB20260812233
SB2026081360
SB2026081364
and 11 more
#VU141789 - Integer overflow
CVE-2026-62897		 CWE-190 Medium
No
No
 8.0.30, 9.0.19 12.08.2026 SB20260812233
SB2026081416
SB2026081417
and 4 more
#VU141498 - Out-of-bounds write
CVE-2026-70354		 CWE-787 High
No
No
 8.0.30, 9.0.19 11.08.2026 SB2026081155
SB2026081416
SB2026081417
and 4 more
#VU138139 - Type confusion
CVE-2026-57108		 CWE-843 Medium
No
No
 8.0.29, 9.0.18 17.07.2026 SB2026071706
SB20260721104
SB2026082404
and 1 more
#VU138088 - Improper Encoding or Escaping of Output
CVE-2026-50659		 CWE-116 Low
No
No
 8.0.29, 9.0.18 17.07.2026 SB2026071706
SB20260721104
SB2026082404
and 1 more
#VU138087 - Allocation of Resources Without Limits or Throttling
CVE-2026-50651		 CWE-770 Medium
No
No
 8.0.29, 9.0.18 17.07.2026 SB2026071706
SB20260721104
SB2026082404
and 1 more
#VU138084 - Allocation of Resources Without Limits or Throttling
CVE-2026-50648		 CWE-770 Medium
No
No
 8.0.29, 9.0.18 17.07.2026 SB2026071706
SB20260721104
SB2026082404
and 1 more
#VU138081 - Improper Access Control
CVE-2026-50528		 CWE-284 Medium
No
No
 8.0.29, 9.0.18 17.07.2026 SB2026071706
SB20260721104
SB2026082404
and 1 more
#VU138080 - Stack-based buffer overflow
CVE-2026-50527		 CWE-121 Medium
No
No
 8.0.29, 9.0.18 17.07.2026 SB2026071706
SB20260721104
SB2026082404
and 1 more
#VU137945 - Improper input validation
CVE-2026-50524		 CWE-20 Medium
No
No
 8.0.29, 9.0.18 17.07.2026 SB2026071706
SB20260721104
SB2026082404
and 1 more


Showing elements 1 - 20 out of 43